Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: 8u0fUu1ezuYxev2DLGpw882cX1QYmdOBmrDhv5lAam8=
Subject key identifier: 18:1B:0A:D7:88:32:7B:83:94:F1:23:36:BD:33:C9:93:4D:F6:2E:96
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 0194BD17C78D19B4C1E4A2636646FB511B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 0EEE
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: 1QHQmahizriPxOX00Hvk6AWy6QpKvYxicPsw5yz5WXI=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:8d:19:b4:c1:e4:a2:63:66:46:fb:51:1b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=181b0ad788327b8394f12336bd33c9934df62e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:ca:a7:5d:eb:f9:84:2d:a8:87:41:55:da:
51:65:25:54:4e:3b:e6:dd:80:15:84:f0:b5:a5:2f:
c6:42:25:97:ef:bb:d1:97:ec:f3:7b:1a:7a:6a:bb:
73:bc:90:e6:ad:6f:dd:b4:97:34:b3:72:09:dd:22:
54:d4:2a:a6:02:1a:99:46:2a:10:a6:fb:f3:58:e5:
f5:59:46:56:2d:e9:94:96:d7:f4:7c:19:e0:7b:c1:
25:66:3b:e5:ec:e0:04:fe:82:3b:f1:eb:c1:04:2e:
88:fb:ea:ba:47:db:62:51:cf:26:c1:a7:4a:40:08:
0f:57:0a:fd:b6:e7:6d:7e:de:f6:cc:24:36:d4:a9:
ab:a3:b5:38:b2:4d:f8:2b:e7:a6:d6:9c:44:49:a5:
44:a1:45:8f:95:22:52:77:16:3d:b3:48:68:da:eb:
f6:e0:9f:ce:58:a5:da:bb:02:2e:fc:31:90:6f:89:
18:9f:ee:13:6f:3b:a0:fa:cc:df:ee:1b:36:37:5d:
04:a8:a7:15:e3:85:bc:b4:b8:67:96:c4:f6:99:0c:
7a:6c:62:5e:fc:e7:cf:cb:7a:cf:be:7a:8e:45:76:
9d:58:24:68:26:ba:c9:2d:1f:2d:fe:c9:9f:20:40:
22:b8:7a:9d:ce:b3:f2:89:44:0f:6f:ee:e7:c7:96:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:0A:D7:88:32:7B:83:94:F1:23:36:BD:33:C9:93:4D:F6:2E:96
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:78:87:03:e4:b4:87:d0:84:41:d7:3a:96:96:90:04:f3:
9e:af:62:f7:89:a1:a7:d5:64:57:99:3a:dc:db:4b:b1:99:14:
d5:bc:cd:1f:4a:b7:97:34:8e:c2:0b:f5:ad:d3:23:f5:99:52:
36:fb:6c:1e:c3:3e:e8:57:c1:89:cf:66:51:85:4f:b8:ba:b8:
e0:4d:f8:93:4a:4c:c1:16:20:c4:6f:fc:6b:08:ec:6b:15:ee:
d4:65:41:98:0a:d6:01:95:5a:70:47:9f:77:c2:a4:20:15:d4:
e8:0a:f6:69:16:21:6f:9f:06:95:13:e2:cc:73:11:bc:8e:13:
41:0d:a8:df:b2:39:67:49:06:2b:3e:75:e0:d4:50:5a:a1:a6:
69:26:99:14:b9:cf:7f:14:ea:7f:78:7b:87:98:79:ae:fb:74:
99:a3:cb:6f:a3:6d:92:87:bf:08:8a:7c:ba:71:70:19:91:5e:
d0:ce:10:35:fb:8c:06:e7:d6:f2:de:61:4a:1a:c9:59:d3:5a:
e5:63:e3:52:19:8e:2a:45:44:7a:8b:88:a7:4c:31:58:22:b2:
1d:fd:d5:a1:5a:f0:83:1c:c9:fe:1d:02:2e:27:4b:fb:08:d1:
57:fd:4d:40:5f:a9:19:fe:98:2f:a2:24:dc:4f:17:a8:d9:d5:
e6:7d:5e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:05 2025 by rpki-client